Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File:                     0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier:          XTwTqh4fjQH4PY5mtyLu1N6hYbKKzwzutTLKAThOw9U=
Subject key identifier:   C4:EF:2E:5C:F1:24:04:B0:40:4C:DD:E6:04:8E:C8:57:07:61:09:4B
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       057F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number:          0569
Signing time:             Sun 19 May 2024 00:51:52 +0000
Manifest this update:     Sun 19 May 2024 00:51:52 +0000
Manifest next update:     Sun 26 May 2024 00:51:52 +0000
Files and hashes:         1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: AIRoDpbLO8uu5jgJTnkT3GIZhMyi+2zYP+VPUiM7VWw=)
                          2: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: 4fwK/7GPLlnhmbhkjNyRaiOCTRCnPsD8/p+clG0tiBU=)
                          3: DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa (hash: LieNCtRR/x1UtodGGxeoi/zTfGlL9IAhjTnk2NT6pkU=)
                          4: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: n3PqijCXw7S8V9XBnPM8z5rgOmdqr/7O7RnU8SwpK2U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407 (0x57f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: May 19 00:51:52 2024 GMT
            Not After : May 26 00:51:52 2024 GMT
        Subject: CN=66494d28-5e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:42:b9:80:9d:07:13:7f:81:1b:5a:e1:6e:f7:
                    95:6b:74:22:da:b5:6d:87:35:a1:5b:19:80:44:27:
                    c4:a0:67:ad:1c:98:f1:ce:50:8e:01:2d:71:81:3f:
                    ef:0f:9a:4a:5e:f6:97:52:6c:51:1f:47:9f:a3:af:
                    ce:c8:63:b8:30:e0:82:69:76:f4:43:50:06:87:85:
                    0a:af:7b:26:bb:56:74:de:f7:98:44:82:2c:9a:cf:
                    89:b2:e8:3b:6e:50:98:f4:5e:7d:dd:f1:67:50:b1:
                    7d:09:a3:e5:ba:c9:28:30:51:6f:bc:57:6a:05:4b:
                    3a:e0:ce:d6:32:4f:a2:fc:df:95:49:ea:4a:b8:12:
                    2d:a5:12:bc:87:4d:32:48:ae:60:f2:1b:1e:b8:b7:
                    8b:1b:90:b3:59:90:11:09:f5:6c:8f:60:c3:20:48:
                    30:b2:c5:11:2e:bf:52:6c:6a:6a:a3:9c:23:40:55:
                    25:6b:39:27:50:26:c2:4c:8c:85:4c:f9:a6:5c:84:
                    64:73:cd:11:cb:5b:32:7a:63:bd:b9:12:e3:cd:95:
                    89:20:44:06:71:be:f5:41:8e:ca:7c:35:3e:f7:8c:
                    0e:a8:68:cc:0e:82:0a:8a:29:8b:d7:82:e5:9b:69:
                    8d:31:3e:0d:7a:12:de:db:4f:97:23:e0:b1:d5:f8:
                    ee:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EF:2E:5C:F1:24:04:B0:40:4C:DD:E6:04:8E:C8:57:07:61:09:4B
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:18:f6:ca:af:96:35:0a:cf:64:9b:78:18:68:6f:8f:4c:38:
         9d:ed:0e:73:e2:5b:f7:8d:fe:60:58:dc:b6:02:c0:5e:52:f5:
         d2:83:5c:92:82:69:21:0c:1b:bb:22:06:d0:38:af:30:05:b8:
         5a:6d:74:b4:18:31:c7:01:08:f6:a0:90:46:75:fc:20:8b:95:
         99:5a:c4:07:49:41:b8:57:da:4d:19:3c:b1:89:24:56:1a:12:
         8f:32:bf:46:fa:d5:3a:04:9e:5e:6a:f6:2f:f4:3c:ca:65:4a:
         89:9a:1c:27:2a:ad:8d:10:19:d0:90:85:bd:e1:99:48:3a:89:
         3e:e0:a0:ea:cc:50:84:c5:84:3f:a7:c1:85:39:73:1b:80:cd:
         cb:b8:88:8f:90:d4:43:20:81:e5:e4:6f:78:66:46:5a:8a:95:
         ae:4b:5d:66:9c:82:68:9e:7e:65:6a:60:38:da:91:e2:bb:78:
         40:17:f6:f4:d1:e5:f0:2e:2e:1d:fa:78:03:61:cb:a7:aa:8a:
         66:c8:d5:d2:1a:f7:54:b9:f4:b2:69:cd:a0:1b:14:20:2e:6f:
         3f:da:a4:8b:b9:91:3d:33:5e:a0:85:15:d5:ee:4d:b6:ef:69:
         fd:2d:c2:57:34:1b:e1:cb:a8:34:08:cd:d1:4c:83:0e:2b:dd:
         d3:f2:54:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3
RTA5NDdENzMwHhcNMjQwNTE5MDA1MTUyWhcNMjQwNTI2MDA1MTUyWjAYMRYwFAYD
VQQDEw02NjQ5NGQyOC01ZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnEK5gJ0HE3+BG1rhbveVa3Qi2rVthzWhWxmARCfEoGetHJjxzlCOAS1xgT/v
D5pKXvaXUmxRH0efo6/OyGO4MOCCaXb0Q1AGh4UKr3smu1Z03veYRIIsms+Jsug7
blCY9F593fFnULF9CaPluskoMFFvvFdqBUs64M7WMk+i/N+VSepKuBItpRK8h00y
SK5g8hseuLeLG5CzWZARCfVsj2DDIEgwssURLr9SbGpqo5wjQFUlazknUCbCTIyF
TPmmXIRkc80Ry1syemO9uRLjzZWJIEQGcb71QY7KfDU+94wOqGjMDoIKiimL14Ll
m2mNMT4NehLe20+XI+Cx1fju1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTvLlzx
JASwQEzd5gSOyFcHYQlLMB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDBBOC83MEMyRUI3QUExOTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMw
NUlmQ2pDUnlubWgtQ1VmWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSGPbKr5Y1Cs9km3gYaG+PTDid7Q5z4lv3jf5gWNy2AsBeUvXSg1yS
gmkhDBu7IgbQOK8wBbhabXS0GDHHAQj2oJBGdfwgi5WZWsQHSUG4V9pNGTyxiSRW
GhKPMr9G+tU6BJ5eavYv9DzKZUqJmhwnKq2NEBnQkIW94ZlIOok+4KDqzFCExYQ/
p8GFOXMbgM3LuIiPkNRDIIHl5G94ZkZaipWuS11mnIJonn5lamA42pHiu3hAF/b0
0eXwLi4d+ngDYcunqopmyNXSGvdUufSyac2gGxQgLm8/2qSLuZE9M16ghRXV7k22
72n9LcJXNBvhy6g0CM3RTIMOK93T8lTj
-----END CERTIFICATE-----
Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org